Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/34352e3138302e32322e302f32332d3234203d3e20323639373432.roa
File:                     34352e3138302e32322e302f32332d3234203d3e20323639373432.roa (raw, json)
Hash identifier:          SpemSs6LW011sPUcjSo0omlp5To+3dfEXjeuugg6khY=
Subject key identifier:   04:E0:BA:25:BF:9B:23:1A:DB:87:6F:96:83:16:0D:95:1A:DC:AA:EE
Certificate issuer:       /CN=C6532B6E8DFB9C6CF073D8E4E153CAF65F174764
Certificate serial:       0564D3D1512E49890C7EB6485831A15AC93DE2E2
Authority key identifier: C6:53:2B:6E:8D:FB:9C:6C:F0:73:D8:E4:E1:53:CA:F6:5F:17:47:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/34352e3138302e32322e302f32332d3234203d3e20323639373432.roa
Signing time:             Tue 05 Mar 2024 17:44:18 +0000
ROA not before:           Tue 05 Mar 2024 17:39:18 +0000
ROA not after:            Tue 04 Mar 2025 17:44:18 +0000
asID:                     269742
IP address blocks:        45.180.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:64:d3:d1:51:2e:49:89:0c:7e:b6:48:58:31:a1:5a:c9:3d:e2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6532B6E8DFB9C6CF073D8E4E153CAF65F174764
        Validity
            Not Before: Mar  5 17:39:18 2024 GMT
            Not After : Mar  4 17:44:18 2025 GMT
        Subject: CN=04E0BA25BF9B231ADB876F9683160D951ADCAAEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f3:d0:b5:25:00:bd:4a:41:60:26:ce:c1:e7:
                    bd:f7:69:16:4f:c4:1d:8f:d9:3b:fe:d8:58:5f:20:
                    06:b2:55:83:56:ea:21:9b:d5:9a:c2:60:f5:30:7b:
                    86:a5:92:00:9b:03:0c:fc:15:9b:4b:62:22:0c:f1:
                    f7:e8:d6:e9:07:5a:be:16:fe:c4:f4:27:03:43:4f:
                    2f:11:5b:17:96:34:c1:f3:c4:7e:9b:93:53:14:16:
                    65:58:09:9f:a9:4a:1b:45:55:bb:32:57:e2:ee:73:
                    07:fd:d3:4f:07:31:f6:65:9c:fe:12:a3:01:d8:51:
                    ae:9a:ad:94:f2:6d:2f:77:51:75:12:72:cd:70:5e:
                    de:ae:3d:ea:d7:50:1f:6d:a0:00:8a:e4:0a:44:6a:
                    e0:09:79:70:03:78:1d:ba:34:43:ac:6b:e3:77:23:
                    a8:39:c8:5d:c8:eb:3f:17:d9:5f:4c:5c:2e:e3:85:
                    ce:61:5f:48:67:a7:1d:62:be:7f:d5:03:dc:92:1c:
                    2c:5e:08:f3:97:51:db:d3:f6:4a:b4:5d:73:3f:66:
                    b9:98:6b:9b:51:85:14:22:3d:43:40:ae:2d:96:6a:
                    ef:25:f2:a2:ff:a5:41:86:32:cb:99:98:e3:83:dd:
                    ca:14:4f:08:9e:19:a0:3f:1e:42:07:56:f8:5d:3d:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E0:BA:25:BF:9B:23:1A:DB:87:6F:96:83:16:0D:95:1A:DC:AA:EE
            X509v3 Authority Key Identifier:
                keyid:C6:53:2B:6E:8D:FB:9C:6C:F0:73:D8:E4:E1:53:CA:F6:5F:17:47:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/34352e3138302e32322e302f32332d3234203d3e20323639373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:a1:fd:d3:ed:5d:e1:84:ae:4d:98:01:80:16:c9:b9:5c:30:
         8d:d8:79:be:6e:ea:3d:44:58:a2:34:16:e0:78:61:15:24:36:
         d1:7e:6b:c6:3e:21:1c:d2:2d:aa:e4:c2:ba:90:f2:c3:e5:4e:
         0f:19:24:b8:af:d8:86:9d:e0:12:0e:9a:0d:dc:ec:80:93:ca:
         8a:51:a0:3f:35:fb:3d:13:ed:71:8c:b4:01:e0:92:45:c6:1d:
         f2:53:bf:2c:20:a5:86:5a:cb:b2:0b:50:42:7b:4e:f3:9a:cd:
         7e:57:a1:96:0a:12:34:5a:4e:e9:40:b6:52:1d:e9:6a:ae:63:
         34:d8:27:98:c3:27:df:e4:a4:ff:98:9e:aa:5c:f9:2d:5a:f3:
         84:a2:e9:8f:c9:d5:2c:a2:d6:3e:00:cd:0e:d0:83:af:5b:fb:
         46:f0:05:f9:21:6b:5a:7c:bb:df:54:db:c3:3d:b3:f6:3b:94:
         2e:bc:4f:14:a9:0a:7b:f5:ca:5e:f4:88:25:a3:13:c8:50:4b:
         49:3e:04:6b:ec:44:ea:24:06:67:9c:88:32:45:97:d5:83:31:
         b6:23:6d:37:5e:1f:01:50:e8:dd:e6:3b:4c:91:17:1d:ef:ee:
         ad:b5:bf:53:cb:bb:cd:8b:ad:0e:29:15:89:1d:1c:0c:cf:8a:
         b5:3c:ab:5f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBWTT0VEuSYkMfrZIWDGhWsk94uIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY1MzJCNkU4REZCOUM2Q0YwNzNEOEU0RTE1M0NBRjY1
RjE3NDc2NDAeFw0yNDAzMDUxNzM5MThaFw0yNTAzMDQxNzQ0MThaMDMxMTAvBgNV
BAMTKDA0RTBCQTI1QkY5QjIzMUFEQjg3NkY5NjgzMTYwRDk1MUFEQ0FBRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa89C1JQC9SkFgJs7B5733aRZP
xB2P2Tv+2FhfIAayVYNW6iGb1ZrCYPUwe4alkgCbAwz8FZtLYiIM8ffo1ukHWr4W
/sT0JwNDTy8RWxeWNMHzxH6bk1MUFmVYCZ+pShtFVbsyV+Lucwf9008HMfZlnP4S
owHYUa6arZTybS93UXUScs1wXt6uPerXUB9toACK5ApEauAJeXADeB26NEOsa+N3
I6g5yF3I6z8X2V9MXC7jhc5hX0hnpx1ivn/VA9ySHCxeCPOXUdvT9kq0XXM/ZrmY
a5tRhRQiPUNAri2Wau8l8qL/pUGGMsuZmOOD3coUTwieGaA/HkIHVvhdPZuxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBOC6Jb+bIxrbh2+WgxYNlRrcqu4wHwYDVR0j
BBgwFoAUxlMrbo37nGzwc9jk4VPK9l8XR2QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNDMwOUI2OUFGQjhCM0IwNkZGNkRBQjlBMkRGOTMxQ0FG
MzYxMzUyQUU4QjgwMEJFN0M0NkYwQkFCNjc0MEE5LzAvQzY1MzJCNkU4REZCOUM2
Q0YwNzNEOEU0RTE1M0NBRjY1RjE3NDc2NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNjUzMkI2RThERkI5QzZDRjA3
M0Q4RTRFMTUzQ0FGNjVGMTc0NzY0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzQzMDlCNjlBRkI4QjNCMDZGRjZEQUI5QTJERjkzMUNBRjM2MTM1MkFF
OEI4MDBCRTdDNDZGMEJBQjY3NDBBOS8wLzM0MzUyZTMxMzgzMDJlMzIzMjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzOTM3MzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS20FjAN
BgkqhkiG9w0BAQsFAAOCAQEApKH90+1d4YSuTZgBgBbJuVwwjdh5vm7qPURYojQW
4HhhFSQ20X5rxj4hHNItquTCupDyw+VODxkkuK/Yhp3gEg6aDdzsgJPKilGgPzX7
PRPtcYy0AeCSRcYd8lO/LCClhlrLsgtQQntO85rNflehlgoSNFpO6UC2Uh3paq5j
NNgnmMMn3+Sk/5ieqlz5LVrzhKLpj8nVLKLWPgDNDtCDr1v7RvAF+SFrWny731Tb
wz2z9juULrxPFKkKe/XKXvSIJaMTyFBLST4Ea+xE6iQGZ5yIMkWX1YMxtiNtN14f
AVDo3eY7TJEXHe/urbW/U8u7zYutDikViR0cDM+KtTyrXw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org